Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
File: vJldFVAngKzfe25qGGXttaDn3Es.mft (raw, json)
Hash identifier: O4FQMvSXcQS0RBT7WgYs4NkpyP0V7xnYwn1+FereO0c=
Subject key identifier: 19:AC:55:18:3C:70:32:16:CA:A5:0E:0E:3A:D1:10:A0:71:64:32:A4
Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
Certificate issuer: /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Certificate serial: 0193523E0E2BBC71538D9A76D761A95AE7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
Manifest number: 0123
Signing time: Fri 22 Nov 2024 05:00:18 +0000
Manifest this update: Fri 22 Nov 2024 05:00:18 +0000
Manifest next update: Sat 23 Nov 2024 05:00:18 +0000
Files and hashes: 1: bZdpzXbXKeGRAYcwQEcKhUSRsrg.roa (hash: sHRBfOPEZZasbO6mAm+imdh4an0ddFiPRQNciDAqfxU=)
2: vJldFVAngKzfe25qGGXttaDn3Es.crl (hash: jKosAmjk8x7wiTZQW3YJqkTjZ86fyHJ6gj66o3WBsBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:3e:0e:2b:bc:71:53:8d:9a:76:d7:61:a9:5a:e7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Validity
Not Before: Nov 22 05:00:18 2024 GMT
Not After : Nov 23 05:00:18 2024 GMT
Subject: CN=19ac55183c703216caa50e0e3ad110a0716432a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:54:50:0a:61:08:5a:0e:4f:19:fd:c2:93:5d:
d6:6a:86:73:db:e0:69:9d:1c:8f:a6:92:35:30:bd:
a5:49:3c:da:97:98:ee:4a:cd:b9:02:26:ce:b1:cc:
55:75:e1:5f:8a:92:e7:79:84:e1:0b:7d:d9:31:16:
df:4e:76:6f:c0:5a:61:ca:18:8b:a0:30:18:54:91:
05:06:35:3f:0f:df:d8:1d:0a:78:93:c5:65:27:46:
f9:87:11:0f:33:03:57:bc:7e:31:06:a9:17:b7:f7:
d1:6d:62:18:7d:e6:b1:03:0c:6b:8f:1f:93:2e:c7:
28:5e:69:b1:b5:23:fa:dc:ca:f0:d0:ac:12:19:4f:
f1:1a:d7:1c:89:ff:54:c3:e7:a0:22:b7:fa:5e:fc:
23:a5:08:c0:cd:2b:4a:07:9b:f3:b2:6b:bb:29:d2:
f4:8e:30:34:fc:ae:7d:dc:60:72:58:cb:a9:72:71:
bf:3a:0c:8e:e5:b3:f3:e4:0a:ee:a4:fd:54:4f:15:
b3:df:5e:35:35:9c:b8:55:6d:b4:7e:7e:62:e9:60:
5c:28:7f:a6:ce:ff:3b:ce:52:4a:8c:1f:c4:c7:77:
90:ae:3a:ec:b8:32:03:0d:6b:47:a3:50:a9:7c:64:
49:a6:cd:7c:34:38:20:5a:42:db:be:31:87:d2:98:
93:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AC:55:18:3C:70:32:16:CA:A5:0E:0E:3A:D1:10:A0:71:64:32:A4
X509v3 Authority Key Identifier:
keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a6:4f:44:2b:f7:ce:7e:f8:74:5a:0a:44:60:68:20:9f:de:
b1:b0:25:a3:20:1c:42:a2:0d:42:2f:e1:27:ff:fe:86:ac:f4:
5d:84:d3:1a:54:8f:90:75:cf:47:2a:9f:b1:bd:cd:8c:db:4c:
c1:c4:6b:75:c4:c5:7d:da:b9:61:b9:88:1a:64:71:f6:4f:f8:
aa:76:8e:7c:a3:47:a8:5f:e6:8b:27:cd:9b:41:7b:a1:06:ff:
f4:05:96:be:a9:32:bd:bc:99:7c:1c:5f:08:35:a1:21:06:1c:
f9:c0:fe:e5:71:7b:ad:8f:df:f0:4d:c3:fe:f0:b9:12:11:09:
5d:e0:f7:95:9c:5e:9a:3b:3c:d0:09:b3:09:14:3a:e6:70:ea:
66:cd:e0:28:8e:bf:1e:ee:61:3e:36:80:37:13:8c:f2:d5:cd:
46:58:14:c6:62:76:9c:00:bb:40:50:5c:21:a6:06:a2:a2:bf:
b7:94:25:c7:2d:6b:e2:c2:5a:a1:fb:7e:1a:b7:78:48:57:bd:
9c:49:9b:b1:af:db:8c:5e:b0:77:1b:4f:64:6e:1a:6d:ae:84:
3b:88:5f:26:86:57:7d:38:13:7e:49:d2:22:57:81:c7:a2:9d:
19:4a:2e:00:3b:1d:ee:e0:91:8e:27:45:b4:6f:11:81:31:9f:
1e:bc:08:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:55:57 2024 by rpki-client on console-fra.rpki-client.org